Do not miss any Logto API references changes, ever again

Subscribe to the Logto API references changelog to be up to date on recent changes.

RSS

Changelog

Last update:
Compare
4 structure changes including:
4 Modifications
Modified 4
GET /api/.well-known/experience
  • Response
  • 200 response Modified
    • application/json content type Modified
      • supportEmail, supportWebsiteUrl, unknownSessionRedirectUrl properties Added
GET /api/.well-known/sign-in-exp
  • Response
  • 200 response Modified
    • application/json content type Modified
      • supportEmail, supportWebsiteUrl, unknownSessionRedirectUrl properties Added
GET /api/sign-in-exp
  • Response
  • 200 response Modified
    • application/json content type Modified
      • supportEmail, supportWebsiteUrl, unknownSessionRedirectUrl properties Added
PATCH /api/sign-in-exp
  • Body
  • application/json content type Modified
    • supportEmail property Added
      • string-1, string-2 properties Added
    • supportWebsiteUrl property Added
      • string-1, string-2 properties Added
    • unknownSessionRedirectUrl property Added
      • string-1, string-2 properties Added
  • Response
  • 200 response Modified
    • application/json content type Modified
      • supportEmail, supportWebsiteUrl, unknownSessionRedirectUrl properties Added
2 structure changes including:
2 Additions
Added 2
GET /api/account-center
PATCH /api/account-center
2 structure changes including:
1 Addition
1 Modification
Modified 1 Breaking
POST /api/users/{userId}/mfa-verifications
  • Body
  • application/json content type Modified
    • alternative Removed
      • Removing a resource is always breaking unless it was deprecated before
        Breaking
    • object-1, object-2, object-3, object-4 alternatives Added
Added 1
DELETE /api/profile/identities/{target}
3 structure changes including:
3 Additions
Added 3
POST /api/profile/identities
POST /api/verifications/social
POST /api/verifications/social/verify
3 structure changes including:
1 Addition
2 Modifications
Modified 2
POST /api/verifications/password
  • Response
  • 201 response Modified
    • application/json content type Modified
      • expiresAt property Added
POST /api/verifications/verification-code
  • Response
  • 201 response Modified
    • application/json content type Modified
      • expiresAt property Added
Added 1
POST /api/profile/primary-phone
6 structure changes including:
4 Additions
2 Modifications
Modified 2
POST /api/authn/single-sign-on/saml/{connectorId}
  • Body
  • application/json content type Modified
    • RelayState property Modified
      • Property is no longer required
POST /api/profile/password
  • Response
  • 422 response Added
Added 4
DELETE /api/sso-connectors/{id}/idp-initiated-auth-config
GET /api/sso-connectors/{id}/idp-initiated-auth-config
PATCH /api/profile/profile
PUT /api/sso-connectors/{id}/idp-initiated-auth-config
5 structure changes including:
5 Additions
Added 5
GET /api/profile
PATCH /api/profile
POST /api/profile/primary-email
POST /api/verifications/verification-code
POST /api/verifications/verification-code/verify
3 structure changes including:
3 Additions
Added 3
GET /api/.well-known/user.openapi.json
POST /api/profile/password
POST /api/verifications/password
3 structure changes including:
2 Breaking changes
1 Addition
2 Modifications
Modified 2 Breaking
POST /api/experience/profile
  • Path went from /api/users/{userId}/profile to /api/experience/profile (same operationId)
    Breaking
  • Verb went from PATCH to POST (same operationId)
    Breaking
  • Body
  • application/json content type Modified
    • object alternative Removed
      • Removing a resource is always breaking unless it was deprecated before
        Breaking
    • object-1, object-2, object-3, object-4, object-5 alternatives Added
  • Path
  • userId path parameter Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • Response
  • 200, 401 responses Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • 204, 422 responses Added
  • Authentication
  • OAuth2 authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
POST /api/experience/verification/verification-code/verify
  • Path went from /api/verification-codes/verify to /api/experience/verification/verification-code/verify (same operationId)
    Breaking
  • Body
  • application/json content type Modified
    • object property Modified
      • Removing polymorphism is always breaking
        Breaking
  • Response
  • 204, 401, 403 responses Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • 200, 404, 501 responses Added
  • Authentication
  • OAuth2 authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
Added 1
POST /api/sign-in-exp/default/check-password
7 structure changes including:
3 Additions
4 Modifications
Modified 4
GET /api/.well-known/sign-in-exp
  • Operation is now deprecated
GET /api/hooks/{id}/recent-logs
  • Response
  • 200 response Modified
    • application/json content type Modified
GET /api/logs
  • Response
  • 200 response Modified
    • application/json content type Modified
GET /api/logs/{id}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • payload property Modified
Added 3
GET /api/.well-known/experience
GET /api/.well-known/experience.openapi.json
GET /api/.well-known/management.openapi.json
2 structure changes including:
1 Breaking change
1 Addition
1 Removal
Removed 1 Breaking
GET /api/experience/verification/sso/connectors
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
Added 1
GET /api/experience/sso-connectors
25 structure changes including:
25 Additions
Added 25
GET /api/experience/verification/sso/connectors
POST /api/experience/identification
POST /api/experience/profile
POST /api/experience/profile/mfa
POST /api/experience/profile/mfa/mfa-skipped
POST /api/experience/submit
POST /api/experience/verification/backup-code/generate
POST /api/experience/verification/backup-code/verify
POST /api/experience/verification/new-password-identity
POST /api/experience/verification/password
POST /api/experience/verification/social/{connectorId}/authorization-uri
POST /api/experience/verification/social/{connectorId}/verify
POST /api/experience/verification/sso/{connectorId}/authorization-uri
POST /api/experience/verification/sso/{connectorId}/verify
POST /api/experience/verification/totp/secret
POST /api/experience/verification/totp/verify
POST /api/experience/verification/verification-code
POST /api/experience/verification/verification-code/verify
POST /api/experience/verification/web-authn/authentication
POST /api/experience/verification/web-authn/authentication/verify
POST /api/experience/verification/web-authn/registration
POST /api/experience/verification/web-authn/registration/verify
PUT /api/experience
PUT /api/experience/interaction-event
PUT /api/experience/profile/password
4 structure changes including:
4 Additions
Added 4
DELETE /api/users/{userId}/personal-access-tokens/{name}
GET /api/users/{userId}/personal-access-tokens
PATCH /api/users/{userId}/personal-access-tokens/{name}
POST /api/users/{userId}/personal-access-tokens
191 structure changes including:
191 Modifications
Modified 191 Breaking
DELETE /api/applications/{applicationId}/roles/{roleId}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
DELETE /api/applications/{applicationId}/user-consent-scopes/{scopeType}/{scopeId}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
DELETE /api/applications/{id}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
DELETE /api/applications/{id}/legacy-secret
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
DELETE /api/applications/{id}/protected-app-metadata/custom-domains/{domain}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
DELETE /api/applications/{id}/secrets/{name}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
DELETE /api/applications/{id}/users/{userId}/consent-organizations/{organizationId}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
DELETE /api/configs/jwt-customizer/{tokenTypePath}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
DELETE /api/configs/oidc/{keyType}/{keyId}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
DELETE /api/connectors/{id}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
DELETE /api/custom-phrases/{languageTag}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
DELETE /api/domains/{id}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
DELETE /api/hooks/{id}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
DELETE /api/organization-invitations/{id}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
DELETE /api/organization-roles/{id}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
DELETE /api/organization-roles/{id}/resource-scopes/{scopeId}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
DELETE /api/organization-roles/{id}/scopes/{organizationScopeId}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
DELETE /api/organization-scopes/{id}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
DELETE /api/organizations/{id}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
DELETE /api/organizations/{id}/applications/{applicationId}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
DELETE /api/organizations/{id}/applications/{applicationId}/roles/{organizationRoleId}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
DELETE /api/organizations/{id}/jit/email-domains/{emailDomain}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
DELETE /api/organizations/{id}/jit/roles/{organizationRoleId}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
DELETE /api/organizations/{id}/jit/sso-connectors/{ssoConnectorId}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
DELETE /api/organizations/{id}/users/{userId}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
DELETE /api/organizations/{id}/users/{userId}/roles/{organizationRoleId}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
DELETE /api/resources/{id}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
DELETE /api/resources/{resourceId}/scopes/{scopeId}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
DELETE /api/roles/{id}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
DELETE /api/roles/{id}/applications/{applicationId}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
DELETE /api/roles/{id}/scopes/{scopeId}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
DELETE /api/roles/{id}/users/{userId}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
DELETE /api/sso-connectors/{id}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
DELETE /api/users/{userId}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
DELETE /api/users/{userId}/identities/{target}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
DELETE /api/users/{userId}/mfa-verifications/{verificationId}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
DELETE /api/users/{userId}/roles/{roleId}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/applications
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
  • Query
  • search_params query parameter Added
GET /api/applications/{applicationId}/roles
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
  • Query
  • search_params query parameter Added
GET /api/applications/{applicationId}/sign-in-experience
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/applications/{applicationId}/user-consent-scopes
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/applications/{id}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/applications/{id}/organizations
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/applications/{id}/protected-app-metadata/custom-domains
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/applications/{id}/secrets
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/applications/{id}/users/{userId}/consent-organizations
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/configs/admin-console
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/configs/jwt-customizer
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/configs/jwt-customizer/{tokenTypePath}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/configs/oidc/{keyType}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/connector-factories
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/connector-factories/{id}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/connectors
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/connectors/{id}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/custom-phrases
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/custom-phrases/{languageTag}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/dashboard/users/active
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/dashboard/users/new
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/dashboard/users/total
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/domains
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/domains/{id}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/hooks
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/hooks/{id}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/hooks/{id}/recent-logs
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/logs
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/logs/{id}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/organization-invitations
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/organization-invitations/{id}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/organization-roles
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/organization-roles/{id}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/organization-roles/{id}/resource-scopes
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/organization-roles/{id}/scopes
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/organization-scopes
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/organization-scopes/{id}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/organizations
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/organizations/{id}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/organizations/{id}/applications
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/organizations/{id}/applications/{applicationId}/roles
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/organizations/{id}/jit/email-domains
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/organizations/{id}/jit/roles
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/organizations/{id}/jit/sso-connectors
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/organizations/{id}/users
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/organizations/{id}/users/{userId}/roles
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/organizations/{id}/users/{userId}/scopes
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/resources
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/resources/{id}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/resources/{resourceId}/scopes
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
  • Query
  • search_params query parameter Added
GET /api/roles
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
  • Query
  • search_params query parameter Added
GET /api/roles/{id}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/roles/{id}/applications
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
  • Query
  • search_params query parameter Added
GET /api/roles/{id}/scopes
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
  • Query
  • search_params query parameter Added
GET /api/roles/{id}/users
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
  • Query
  • search_params query parameter Added
GET /api/sign-in-exp
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/sso-connector-providers
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/sso-connectors
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/sso-connectors/{id}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/systems/application
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/user-assets/service-status
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/users
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
  • Query
  • search_params query parameter Added
GET /api/users/{userId}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/users/{userId}/custom-data
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/users/{userId}/has-password
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/users/{userId}/mfa-verifications
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/users/{userId}/organizations
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
GET /api/users/{userId}/roles
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
  • Query
  • search_params query parameter Added
PATCH /api/applications/{applicationId}/custom-data
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
PATCH /api/applications/{id}
  • Body
  • application/json content type Modified
    • oidcClientMetadata property Modified
      • redirectUris, postLogoutRedirectUris properties Modified
        • Properties are now required
          Breaking
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
PATCH /api/applications/{id}/secrets/{name}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
PATCH /api/configs/admin-console
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
PATCH /api/configs/jwt-customizer/{tokenTypePath}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
PATCH /api/connectors/{id}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
PATCH /api/hooks/{id}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
PATCH /api/hooks/{id}/signing-key
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
PATCH /api/organization-roles/{id}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
PATCH /api/organization-scopes/{id}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
PATCH /api/organizations/{id}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
PATCH /api/resources/{id}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
PATCH /api/resources/{id}/is-default
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
PATCH /api/resources/{resourceId}/scopes/{scopeId}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
PATCH /api/roles/{id}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
PATCH /api/sign-in-exp
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
PATCH /api/sso-connectors/{id}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
PATCH /api/users/{userId}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
PATCH /api/users/{userId}/custom-data
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
PATCH /api/users/{userId}/is-suspended
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
PATCH /api/users/{userId}/password
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
PATCH /api/users/{userId}/profile
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
POST /api/applications
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
POST /api/applications/{applicationId}/roles
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
POST /api/applications/{applicationId}/user-consent-scopes
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
POST /api/applications/{id}/protected-app-metadata/custom-domains
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
POST /api/applications/{id}/secrets
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
POST /api/applications/{id}/users/{userId}/consent-organizations
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
POST /api/configs/jwt-customizer/test
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
POST /api/configs/oidc/{keyType}/rotate
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
POST /api/connectors
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
POST /api/connectors/{connectorId}/authorization-uri
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
POST /api/connectors/{factoryId}/test
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
POST /api/domains
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
POST /api/hooks
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
POST /api/hooks/{id}/test
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
POST /api/organization-invitations
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
POST /api/organization-invitations/{id}/message
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
POST /api/organization-roles
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
POST /api/organization-roles/{id}/resource-scopes
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
POST /api/organization-roles/{id}/scopes
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
POST /api/organization-scopes
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
POST /api/organizations
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
POST /api/organizations/{id}/applications
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
POST /api/organizations/{id}/applications/roles
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
POST /api/organizations/{id}/applications/{applicationId}/roles
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
POST /api/organizations/{id}/jit/email-domains
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
POST /api/organizations/{id}/jit/roles
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
POST /api/organizations/{id}/jit/sso-connectors
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
POST /api/organizations/{id}/users
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
POST /api/organizations/{id}/users/roles
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
POST /api/organizations/{id}/users/{userId}/roles
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
POST /api/resources
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
POST /api/resources/{resourceId}/scopes
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
POST /api/roles
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
POST /api/roles/{id}/applications
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
POST /api/roles/{id}/scopes
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
POST /api/roles/{id}/users
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
POST /api/sign-in-exp/default/custom-ui-assets
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
POST /api/sso-connectors
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
POST /api/subject-tokens
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
POST /api/user-assets
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
POST /api/users
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
POST /api/users/{userId}/identities
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
POST /api/users/{userId}/mfa-verifications
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
POST /api/users/{userId}/password/verify
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
POST /api/users/{userId}/roles
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
POST /api/verification-codes
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
POST /api/verification-codes/verify
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
PUT /api/applications/{applicationId}/roles
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
PUT /api/applications/{applicationId}/sign-in-experience
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
PUT /api/applications/{id}/users/{userId}/consent-organizations
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
PUT /api/configs/jwt-customizer/{tokenTypePath}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
PUT /api/custom-phrases/{languageTag}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
PUT /api/organization-invitations/{id}/status
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
PUT /api/organization-roles/{id}/resource-scopes
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
PUT /api/organization-roles/{id}/scopes
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
PUT /api/organizations/{id}/applications
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
PUT /api/organizations/{id}/applications/{applicationId}/roles
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
PUT /api/organizations/{id}/jit/email-domains
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
PUT /api/organizations/{id}/jit/roles
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
PUT /api/organizations/{id}/jit/sso-connectors
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
PUT /api/organizations/{id}/users
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
PUT /api/organizations/{id}/users/{userId}/roles
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
PUT /api/users/{userId}/identities/{target}
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
PUT /api/users/{userId}/roles
  • Authentication
  • Management api authentication method Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • OAuth2 authentication method Added
6 structure changes including:
1 Addition
5 Modifications
Modified 5
GET /api/applications
  • Response
  • 200 response Modified
    • application/json content type Modified
GET /api/applications/{id}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • secret property Modified
        • Property is now deprecated
GET /api/organizations/{id}/applications
  • Response
  • 200 response Modified
    • application/json content type Modified
PATCH /api/applications/{id}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • secret property Modified
        • Property is now deprecated
POST /api/applications
  • Response
  • 200 response Modified
    • application/json content type Modified
      • secret property Modified
        • Property is now deprecated
Added 1
PATCH /api/applications/{id}/secrets/{name}
8 structure changes including:
1 Addition
7 Modifications
Modified 7
DELETE /api/applications/{id}/legacy-secret
  • Response
  • 200 response Modified
    • application/json content type Modified
      • customData property Added
GET /api/applications
  • Response
  • 200 response Modified
    • application/json content type Modified
GET /api/applications/{id}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • customData property Added
GET /api/organizations/{id}/applications
  • Response
  • 200 response Modified
    • application/json content type Modified
GET /api/roles/{id}/applications
  • Response
  • 200 response Modified
    • application/json content type Modified
PATCH /api/applications/{id}
  • Body
  • application/json content type Modified
    • customData property Added
  • Response
  • 200 response Modified
    • application/json content type Modified
      • customData property Added
POST /api/applications
  • Body
  • application/json content type Modified
    • customData property Added
  • Response
  • 200 response Modified
    • application/json content type Modified
      • customData property Added
Added 1
PATCH /api/applications/{applicationId}/custom-data
4 structure changes including:
4 Additions
Added 4
DELETE /api/applications/{id}/legacy-secret
DELETE /api/applications/{id}/secrets/{name}
GET /api/applications/{id}/secrets
POST /api/applications/{id}/secrets
32 structure changes including:
32 Modifications
Modified 32
POST /api/applications/{applicationId}/roles
  • Response
  • 201 response Modified
    • application/json content type Added
POST /api/applications/{applicationId}/user-consent-scopes
  • Response
  • 201 response Modified
    • application/json content type Added
POST /api/applications/{id}/protected-app-metadata/custom-domains
  • Response
  • 201 response Modified
    • application/json content type Added
POST /api/applications/{id}/users/{userId}/consent-organizations
  • Response
  • 201 response Modified
    • application/json content type Added
POST /api/domains
  • Response
  • 201 response Modified
    • application/json content type Added
POST /api/hooks
  • Response
  • 201 response Modified
    • application/json content type Added
POST /api/organization-invitations
  • Response
  • 201 response Modified
    • application/json content type Added
POST /api/organization-roles
  • Response
  • 201 response Modified
    • application/json content type Added
POST /api/organization-roles/{id}/resource-scopes
  • Response
  • 201 response Modified
    • application/json content type Added
POST /api/organization-roles/{id}/scopes
  • Response
  • 201 response Modified
    • application/json content type Added
POST /api/organization-scopes
  • Response
  • 201 response Modified
    • application/json content type Added
POST /api/organizations
  • Response
  • 201 response Modified
    • application/json content type Added
POST /api/organizations/{id}/applications
  • Response
  • 201 response Modified
    • application/json content type Added
POST /api/organizations/{id}/applications/roles
  • Response
  • 201 response Modified
    • application/json content type Added
POST /api/organizations/{id}/applications/{applicationId}/roles
  • Response
  • 201 response Modified
    • application/json content type Added
POST /api/organizations/{id}/jit/email-domains
  • Response
  • 201 response Modified
    • application/json content type Added
POST /api/organizations/{id}/jit/roles
  • Response
  • 201 response Modified
    • application/json content type Added
POST /api/organizations/{id}/jit/sso-connectors
  • Response
  • 201 response Modified
    • application/json content type Added
POST /api/organizations/{id}/users
  • Response
  • 201 response Modified
    • application/json content type Added
POST /api/organizations/{id}/users/roles
  • Response
  • 201 response Modified
    • application/json content type Added
POST /api/organizations/{id}/users/{userId}/roles
  • Response
  • 201 response Modified
    • application/json content type Added
POST /api/resources
  • Response
  • 201 response Modified
    • application/json content type Added
POST /api/resources/{resourceId}/scopes
  • Response
  • 201 response Modified
    • application/json content type Added
POST /api/roles/{id}/applications
  • Response
  • 201 response Modified
    • application/json content type Added
POST /api/roles/{id}/scopes
  • Response
  • 201 response Modified
    • application/json content type Added
POST /api/roles/{id}/users
  • Response
  • 201 response Modified
    • application/json content type Added
POST /api/subject-tokens
  • Response
  • 201 response Modified
    • application/json content type Added
POST /api/users/{userId}/roles
  • Response
  • 201 response Modified
    • application/json content type Added
PUT /api/applications/{applicationId}/sign-in-experience
  • Response
  • 201 response Modified
    • application/json content type Added
PUT /api/configs/jwt-customizer/{tokenTypePath}
  • Response
  • 201 response Modified
    • application/json content type Added
PUT /api/custom-phrases/{languageTag}
  • Response
  • 201 response Modified
    • application/json content type Added
PUT /api/users/{userId}/identities/{target}
  • Response
  • 201 response Modified
    • application/json content type Added
6 structure changes including:
1 Breaking change
2 Additions
3 Modifications
1 Removal
Modified 3 Breaking
GET /api/.well-known/sign-in-exp
  • Response
  • 200 response Modified
    • application/json content type Modified
      • customUiAssetId property Removed
        • Removing a resource is always breaking unless it was deprecated before
          Breaking
      • customUiAssets property Added
GET /api/sign-in-exp
  • Response
  • 200 response Modified
    • application/json content type Modified
      • customUiAssetId property Removed
        • Removing a resource is always breaking unless it was deprecated before
          Breaking
      • customUiAssets property Added
PATCH /api/sign-in-exp
  • Body
  • application/json content type Modified
    • customUiAssetId property Removed
      • Removing a resource is always breaking unless it was deprecated before
        Breaking
    • customUiAssets property Added
  • Response
  • 200 response Modified
    • application/json content type Modified
      • customUiAssetId property Removed
        • Removing a resource is always breaking unless it was deprecated before
          Breaking
      • customUiAssets property Added
Removed 1 Breaking
POST /api/security/subject-tokens
  • Removing a resource is always breaking unless it was deprecated before
    Breaking
Added 2
POST /api/sign-in-exp/default/custom-ui-assets
POST /api/subject-tokens
13 structure changes including:
13 Modifications
Modified 13 Breaking
GET /api/.well-known/sign-in-exp
  • Response
  • 200 response Modified
    • application/json content type Modified
      • branding property Modified
  • Query
  • organization_id query parameter Removed
    • Removing a resource is always breaking unless it was deprecated before
      Breaking
  • organizationId, appId query parameters Added
GET /api/applications/{applicationId}/sign-in-experience
  • Response
  • 200 response Modified
    • application/json content type Modified
      • branding property Modified
      • color property Added
GET /api/applications/{id}/organizations
  • Response
  • 200 response Modified
    • application/json content type Modified
GET /api/applications/{id}/users/{userId}/consent-organizations
  • Response
  • 200 response Modified
    • application/json content type Modified
      • organizations property Modified
GET /api/interaction/consent
  • Response
  • 200 response Modified
    • application/json content type Modified
      • application property Modified
GET /api/organizations
  • Response
  • 200 response Modified
    • application/json content type Modified
GET /api/organizations/{id}
  • Response
  • 200 response Modified
    • application/json content type Modified
      • branding property Modified
GET /api/sign-in-exp
  • Response
  • 200 response Modified
    • application/json content type Modified
      • branding property Modified
GET /api/users/{userId}/organizations
  • Response
  • 200 response Modified
    • application/json content type Modified
PATCH /api/organizations/{id}
  • Body
  • application/json content type Modified
    • branding property Modified
      • darkFavicon property Added
  • Response
  • 200 response Modified
    • application/json content type Modified
      • branding property Modified
PATCH /api/sign-in-exp
  • Body
  • application/json content type Modified
    • branding property Modified
      • darkFavicon property Added
  • Response
  • 200 response Modified
    • application/json content type Modified
      • branding property Modified
POST /api/organizations
  • Body
  • application/json content type Modified
    • branding property Modified
      • darkFavicon property Added
PUT /api/applications/{applicationId}/sign-in-experience
  • Body
  • application/json content type Modified
    • branding property Modified
      • darkFavicon property Added
    • color property Added
  • Response
  • 200 response Modified
    • application/json content type Modified
      • branding property Modified
      • color property Added